Tim Brown VP Security of Solarwinds said: “We check code out of source code control, have a TeamCity environment to kick off the build, and here the attacker l

Tim Brown VP Security of Solarwinds said: “We check code out of source code control, have a TeamCity environment to kick off the build, and here the attacker looked for Orion to be built and swapped a file. It was a transient virtual machine and that’s hard to detect,” he said. https://itwire.com/security/solarwinds-speaks-out,-and-software-dev-can-never-be-the-same-again.html https://itwire.com/security/solarwinds-speaks-out,-and-softw... So it sounds like the VM host they were running builds upon was compromised - or maybe JetBrains was compromised? JetBrains claims there is no evidence they were compromised https://blog.jetbrains.com/blog/2021/01/07/an-update-on-solarwinds/ https://blog.jetbrains.com/blog/2021/01/07/an-update-on-sola...